fix: 编译选项安全加固

checksec检查安全加固存在“No PIE”的情况

Log: 编译选项安全加固
Task: https://pms.uniontech.com/zentao/task-view-101037.html
Influence: 安全编译
Change-Id: Ib53d6ebe2eae2014dc426a4ec7e7e075f0482eb9
This commit is contained in:
wubowen 2022-02-23 21:41:26 +08:00
parent 15e022eea9
commit 218539e321

View File

@ -14,7 +14,9 @@ set(CMAKE_AUTORCC ON)
set(CMAKE_CXX_FLAGS "-g -Wall")
#
ADD_DEFINITIONS("-fstack-protector-strong -D_FORTITY_SOURCE=1 -z noexecstack -pie -fPIC -z lazy")
set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fstack-protector-all")
set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fstack-protector-all")
set(CMAKE_EXE_LINKER_FLAGS "-z relro -z now -z noexecstack -pie")
if (${CMAKE_SYSTEM_PROCESSOR} MATCHES "mips64")
set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -O3 -ftree-vectorize -march=loongson3a -mhard-float -mno-micromips -mno-mips16 -flax-vector-conversions -mloongson-ext2 -mloongson-mmi -fPIE")